Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E73006AA682811EB8D635520C4F9AE02.roa
File:                     E73006AA682811EB8D635520C4F9AE02.roa (raw, json)
Hash identifier:          3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=
Subject key identifier:   F3:AD:36:E0:79:65:32:CA:70:D9:12:8F:48:51:B3:3A:A0:81:CD:2B
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       34BD
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E73006AA682811EB8D635520C4F9AE02.roa
Signing time:             Mon 04 Aug 2025 15:21:01 +0000
ROA not before:           Mon 04 Aug 2025 15:21:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17448
IP address blocks:        103.131.95.0/24 maxlen: 24
                          2001:df4:e900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13501 (0x34bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Aug  4 15:21:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6890cfdc-eb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:50:c8:8b:0a:ad:1d:b3:a7:91:4f:fe:88:
                    8d:e0:99:28:bf:31:96:da:31:69:53:34:09:34:0e:
                    1e:71:31:86:6f:40:1c:51:38:e0:da:4a:17:cc:71:
                    57:17:9d:dd:24:60:36:3f:e0:e7:5c:ca:14:51:52:
                    15:32:8e:84:1c:92:45:62:f1:73:7e:d3:f6:f5:39:
                    58:7d:6d:24:ec:19:84:ba:e9:fe:80:83:af:1e:43:
                    49:35:47:4b:4f:e0:7d:d4:cf:3b:fa:26:38:b4:41:
                    14:3f:5b:42:16:6a:93:93:97:f0:58:27:3f:ea:04:
                    b3:07:c9:34:f3:af:34:d8:28:b5:f7:87:90:cb:e8:
                    bc:ea:74:69:e7:a5:a0:9d:70:ce:32:7e:52:f3:42:
                    07:cb:bf:db:99:1a:19:1f:b4:77:99:6a:a8:e2:7e:
                    12:b3:87:6b:90:ca:01:44:67:d0:3e:f9:f8:15:83:
                    5e:c7:a7:0d:f1:d1:f8:d6:5b:88:f0:ae:48:43:82:
                    04:07:06:9b:d7:f7:e1:62:56:d1:19:4a:98:4f:df:
                    50:7c:a6:fc:65:d8:f8:e8:5f:c2:24:49:00:bd:ce:
                    6f:c9:dc:32:8d:90:0e:b1:0e:a4:a4:75:5d:16:5e:
                    d0:cb:67:fc:5b:c1:3e:0c:13:18:d4:7d:a1:ea:25:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AD:36:E0:79:65:32:CA:70:D9:12:8F:48:51:B3:3A:A0:81:CD:2B
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E73006AA682811EB8D635520C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.95.0/24
                IPv6:
                  2001:df4:e900::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:48:bf:b6:5b:7f:87:1d:5d:5b:b9:ec:ab:a2:e1:04:56:42:
         c8:0b:47:68:8e:88:8b:9c:78:68:c1:77:e2:1c:e1:1d:01:06:
         64:a0:8e:a5:b0:4f:4c:ce:bb:97:ed:d8:46:59:c2:3e:d5:d7:
         d9:2f:07:82:76:c4:6e:90:3f:f8:94:a5:28:d8:16:21:03:0c:
         7b:00:c1:bb:65:5b:da:5c:d7:77:12:16:b7:e2:4a:7a:56:0e:
         5f:09:95:08:67:1f:99:34:27:0d:83:b6:5f:df:3c:83:12:1c:
         81:6c:82:11:e5:c7:4a:56:86:8b:ff:20:d4:f0:30:7a:16:2d:
         5f:c8:8c:89:4c:ba:50:7b:b0:d6:c8:b3:34:e5:33:52:23:97:
         e2:1e:1d:2c:8f:f5:e3:f7:ac:d0:1d:4e:ec:5e:8e:82:29:fe:
         0a:6d:06:61:be:60:9d:74:ae:f9:0a:9b:56:54:64:9d:5e:8f:
         e2:14:88:b8:17:05:dd:5a:a7:41:76:bb:5f:cb:08:09:7e:81:
         53:a3:cd:ef:3c:b9:a5:8b:eb:ed:59:bd:e0:9c:06:1b:90:74:
         26:51:29:ed:6a:c7:cb:74:a5:1e:9c:4b:a4:aa:c8:32:b5:d8:
         5f:4c:7e:f5:58:da:78:bc:3b:92:2e:fd:76:53:ae:b2:43:c3:
         a0:30:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:53 2025 by rpki-client